FULL – Cliente vulnerabilities

2 known vulnerabilities in FULL – Cliente from Fullservices. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  FULL – Cliente: Improper Neutralization of Input During Web Page Generation

  CVE-2024-6447Jul 11, 2024Fullservices

  The FULL – Cliente plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the license plan parameter in all versions up to, and including, 3.1.12 due to insufficient input sanitization and output escaping as well as missing authorization and cap

• 8.8 High severity

  FULL – Cliente: Unrestricted Upload of File with Dangerous Type

  CVE-2023-4243Aug 9, 2023Fullservices

  The FULL - Customer plugin for WordPress is vulnerable to Arbitrary File Upload via the /install-plugin REST route in versions up to, and including, 2.2.3 due to improper authorization. This allows authenticated attackers with subscriber-level permissions and